Comment Don't be surprised (Score 1) 167
Vista includes security techniques and technologies that Windows XP lacks, the MSRC should reconsider how it ranks Vista when a vulnerability affects both Microsoft's new operating system and its predecessor, Windows XP. Don't be surprised if you see a bug that's say, Important on Windows XP and Important on Windows Vista, even if Windows Vista has a few more defenses and mitigations in place. Vista includes a number of new security features that randomize memory, check code for buffer overflows and require user permission for potentially risky operations. On Vista, the vulnerability will be so tagged, Vista-specific security technologies notwithstanding. Analysts and outside Microsoft security professionals took the MSRC's side and blasted Howard's idea. MSRC won...yes!!!